Umair Nehri — DevOps Manager

A security researcher with a strong interest in Web Application Security, OSINT and developing security tools. I had pursued my Bachelor of Computer Applications (BCA) from Maulana Azad College of Arts Science and Commerce Aurangabad (2020-23) and hold strong academic and extracurricular records. I was also selected as a Lead for the Google Developers Student Club chapter for my college. Currently I am working as a Senior Security Analyst and Researcher and previously worked as a Security Researcher for RedHunt Labs. Both of these opportunities have helped me get used to tasks such as: • Developing Security Tools and Scripts • Researching around latest and trending vulnerabilities and developing scanners for them in certain cases • Conducting research work including Internet-Wide scans for a wide variety of topics like dependency related vulnerabilities, state of security of Android apps etc • Writing POCs and various other scripts for mass scans I also try to actively participate in CTFs, Conferences as well as other community events to enhance my existing skill set as well as contribute to some initiatives every now and then. I am also a Senior Judge for the Trace Labs Search Party CTF where I review all the incoming submissions by the participants and has volunteered more than 8 times in a row. When it comes to development (especially security-focused tools), I believe I have a good hold on C++, Golang, Python, Docker, SQL, Bash, C and Web (HTML, CSS, JS, Bootstrap, PHP). At the moment I am also trying to learn new languages such as V and developing smart contracts in Solidity to get an idea about the security aspect of Blockchain. I also hold a beginner-intermediate level of knowledge when it comes to Cloud Computing and specifically GCP where I have worked on tools for asset extraction which also focused on other platforms such as DigitalOcean and Cloudflare. Some of my significant open-source contributions are: • BucketLoot (S3 Bucket Scanner) - https://github.com/redhuntlabs/BucketLoot • Genzai (IoT Security Scanner) - https://github.com/umair9747/Genzai • Hunt4Spring (Vulnerability Scanner) - https://github.com/redhuntlabs/Hunt4Spring • Vichiti (OSINT) - https://github.com/umair9747/vichiti • Archer (Web) - https://github.com/umair9747/Archer • Headmail (OSINT) - https://github.com/umair9747/headmail When it comes to my experience with web application security, I have been acknowledged by IBM, Swiggy, Hotstar, Department of Justice and Security Netherlands, US Department of Defense, UnitedNations, Brazil Government, Kongsberg, etc.

Stackforce AI infers this person is a Cybersecurity professional specializing in web application security and vulnerability research.

Location: Dubai, United Arab Emirates

Experience: 4 yrs 5 mos